1. Introduction
Hiriso, Inc. (“Hiriso,” “we,” “us,” or “our”) provides an interview intelligence platform and applicant tracking system designed with privacy, security, and data ownership as core principles.
This Privacy Policy explains how we collect, use, protect, and provide control over personal data processed through:
- hiriso.com
- app.hiriso.com
- Hiriso desktop and mobile recording applications
- Related APIs and AI-powered services
Hiriso does not sell personal data, does not share customer data for advertising, and does not reuse interviews or recordings for unrelated purposes or model training.
2. Roles Under Data Protection Law
Depending on context:
- Hiriso acts as a Data Processor for candidate and interview data processed on behalf of customers.
- Hiriso acts as a Data Controller for account, billing, and website usage data.
3. Categories of Personal Data
3.1 Account & Organization Data
- Name, email address, company name
- User roles and permissions
- Authentication credentials (securely hashed)
3.2 Candidate & Recruitment Data
- Candidate profiles and resumes
- Interview notes, evaluations, and scores
- Hiring pipeline status
3.3 Interview Content
- Audio recordings (microphone and system audio where enabled)
- Transcripts and structured Q&A
- AI-generated insights, summaries, and signals
3.4 Technical Data
- IP address
- Device and browser type
- Session identifiers
- Error and performance logs
4. Purpose of Processing
We process data solely to:
- Provide and operate the Services
- Enable interviews, recordings, transcription, and analysis
- Manage recruitment workflows
- Improve security, reliability, and performance
- Comply with legal obligations
5. AI & Automated Processing
Hiriso uses AI strictly for customer-initiated features, including transcription, scoring, summarization, and search.
Guarantees:
- No interview data is used to train public or shared AI models
- AI processing is tenant-isolated
- Outputs remain private to the customer organization
6. Data Sharing
Hiriso never sells or resells personal data.
We may engage vetted subprocessors (cloud hosting, speech-to-text, email delivery) under strict contractual safeguards:
- Confidentiality
- Limited purpose processing
- No independent data use
7. Data Retention & Deletion
- Customers control retention settings
- Data can be deleted at any time
- Expiration (TTL) policies may automatically remove data
- Deleted data is permanently removed within a reasonable timeframe
8. Data Security
We implement industry-standard safeguards:
- Encryption in transit and at rest
- Role-based access controls
- Secure session management
- Tenant isolation
- Audit logging
9. Your Rights (GDPR & CCPA)
You have the right to:
- Access your data
- Correct inaccurate data
- Delete your data
- Restrict or object to processing
- Export your data
- Withdraw consent where applicable
Requests can be made via the application or by contacting privacy@hiriso.com.
10. International Transfers
Where data is transferred internationally, Hiriso applies appropriate safeguards, including contractual protections consistent with GDPR requirements.